OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Am I being a relay for spam?

From: Doug (dougdougnc.com)
Date: Wed Aug 01 2007 - 10:28:28 CDT


Well, I didn't want to take up too much time here. My main concern is that I'm
not being a relay for spam.

Here's a grep of /var/logs/mail. customosas.com, mentioned near the end, is
one of my mail domains, the other being dougnc.com

Thanks!

venture:/var/log # grep com.com mail | grep "Aug 1" | more
Aug 1 01:09:15 venture postfix/smtp[23700]: connect to
com.com[216.239.122.102]: Connection timed ou
t (port 25)
Aug 1 01:09:45 venture postfix/smtp[23700]: connect to
com.com[216.239.113.101]: Connection timed ou
t (port 25)
Aug 1 01:09:45 venture postfix/smtp[23700]: 616B76CBD9:
to=<postmastercom.com>, orig_to=<mailcusto
mosas.com>, relay=none, delay=60, delays=0.08/0.02/60/0, dsn=4.4.1,
status=deferred (connect to com.c
om[216.239.113.101]: Connection timed out)
Aug 1 01:18:05 venture postfix/qmgr[4402]: A7BFC6C9E9: from=<rootcom.com>,
size=501, nrcpt=1 (queue
 active)
Aug 1 01:18:35 venture postfix/smtp[23766]: connect to
com.com[216.239.113.101]: Connection timed ou
t (port 25)
Aug 1 01:18:35 venture postfix/smtp[23765]: connect to
com.com[216.239.113.101]: Connection timed ou
t (port 25)
Aug 1 01:18:35 venture postfix/smtp[23768]: connect to
com.com[216.239.122.102]: Connection timed ou
t (port 25)
Aug 1 01:18:35 venture postfix/smtp[23767]: connect to
com.com[216.239.113.101]: Connection timed ou
t (port 25)
Aug 1 01:19:05 venture postfix/smtp[23766]: connect to
com.com[216.239.122.102]: Connection timed ou
t (port 25)
Aug 1 01:19:05 venture postfix/smtp[23765]: connect to
com.com[216.239.122.102]: Connection timed ou
t (port 25)
Aug 1 01:19:05 venture postfix/smtp[23767]: connect to
com.com[216.239.122.102]: Connection timed ou
t (port 25)
Aug 1 01:19:05 venture postfix/smtp[23768]: connect to
com.com[216.239.113.101]: Connection timed ou
t (port 25)
Aug 1 01:19:06 venture postfix/smtp[23768]: 5F2C96CBDA:
to=<postmastercom.com>, orig_to=<mailcusto
mosas.com>, relay=none, delay=70102, delays=70042/0.14/60/0, dsn=4.4.1,
status=deferred (connect to c
om.com[216.239.113.101]: Connection timed out)
Aug 1 01:19:06 venture postfix/smtp[23766]: 1D3F36CBD6:
to=<postmastercom.com>, orig_to=<mailcusto
mosas.com>, relay=none, delay=404546, delays=404485/0.03/60/0, dsn=4.4.1,
status=deferred (connect to

Doug

On Wednesday 01 August 2007 10:22, Barry Irwin wrote:
> Doug wrote:
> > I'm running postfix on SuSE Linux 10.2. I have set relay_domains =
> > $mynetworks.
> >
> > I am concerned because when I go into Webmin and look at the Mail Queue
> > for Postfix, I see entries like this:
> >
> > merrowydfipoptik-crew.com postmastercom.com 20.08 kB connect to
> > com.com[216.239.113.101]: Connection timed out
> >
> > This could not have come from any of my users. Right now I have 4
> > messages to postmastercom.com, and one to rootcom.com. The status on
> > one of them is "Connection Timed Out"
> >
> > I do get lots of spam, which I have managed to cut in half with postfix
> > and spamassassin.
> >
> > Doug
>
> Hi Doug
>
> What these look to possibly be is bounce messages? Although without
> seeing a full snippet of your mailq and particularly the mail logs its
> difficult to say.
>
> If you trace these addresses in your maillogs form which hosts were they
> received ? What is your domain? without all the pieces its a little
> hard for people to assist you. PLease revisit the welcome message you
> got when you joined the list for details on what kind of information to
> provide to aid in debugging.
>
> Barry